Federal Register / Vol. 78, No. 33 / Tuesday, February 19, 2013 / Presidential Documents
11743
of critical infrastructure required under section 9 of this order. Within 90
days of the publication of the preliminary Framework, these agencies shall
submit a report to the President, through the Assistant to the President
for Homeland Security and Counterterrorism, the Director of OMB, and
the Assistant to the President for Economic Affairs, that states whether
or not the agency has clear authority to establish requirements based upon
the Cybersecurity Framework to sufficiently address current and projected
cyber risks to critical infrastructure, the existing authorities identified, and
any additional authority required.
(b) If current regulatory requirements are deemed to be insufficient, within
90 days of publication of the final Framework, agencies identified in subsection (a) of this section shall propose prioritized, risk-based, efficient,
and coordinated actions, consistent with Executive Order 12866 of September
30, 1993 (Regulatory Planning and Review), Executive Order 13563 of January
18, 2011 (Improving Regulation and Regulatory Review), and Executive Order
13609 of May 1, 2012 (Promoting International Regulatory Cooperation),
to mitigate cyber risk.
(c) Within 2 years after publication of the final Framework, consistent
with Executive Order 13563 and Executive Order 13610 of May 10, 2012
(Identifying and Reducing Regulatory Burdens), agencies identified in subsection (a) of this section shall, in consultation with owners and operators
of critical infrastructure, report to OMB on any critical infrastructure subject
to ineffective, conflicting, or excessively burdensome cybersecurity requirements. This report shall describe efforts made by agencies, and make recommendations for further actions, to minimize or eliminate such requirements.
(d) The Secretary shall coordinate the provision of technical assistance
to agencies identified in subsection (a) of this section on the development
of their cybersecurity workforce and programs.
(e) Independent regulatory agencies with responsibility for regulating the
security of critical infrastructure are encouraged to engage in a consultative
process with the Secretary, relevant Sector-Specific Agencies, and other
affected parties to consider prioritized actions to mitigate cyber risks for
critical infrastructure consistent with their authorities.
Sec. 11. Definitions. (a) ‘‘Agency���’ means any authority of the United States
that is an ‘‘agency’’ under 44 U.S.C. 3502(1), other than those considered
to be independent regulatory agencies, as defined in 44 U.S.C. 3502(5).
(b) ‘‘Critical Infrastructure Partnership Advisory Council’’ means the council established by DHS under 6 U.S.C. 451 to facilitate effective interaction
and coordination of critical infrastructure protection activities among the
Federal Government; the private sector; and State, local, territorial, and
tribal governments.
(c) ‘‘Fair Information Practice Principles’’ means the eight principles set
forth in Appendix A of the National Strategy for Trusted Identities in Cyberspace.
srobinson on DSK4SPTVN1PROD with MISCELLANEOUS
(d) ‘‘Independent regulatory agency’’ has the meaning given the term in
44 U.S.C. 3502(5).
(e) ‘‘Sector Coordinating Council’’ means a private sector coordinating
council composed of representatives of owners and operators within a particular sector of critical infrastructure established by the National Infrastructure Protection Plan or any successor.
(f) ‘‘Sector-Specific Agency’’ has the meaning given the term in Presidential
Policy Directive–21 of February 12, 2013 (Critical Infrastructure Security
and Resilience), or any successor.
Sec. 12. General Provisions. (a) This order shall be implemented consistent
with applicable law and subject to the availability of appropriations. Nothing
in this order shall be construed to provide an agency with authority for
regulating the security of critical infrastructure in addition to or to a greater
VerDate Mar<15>2010
18:55 Feb 15, 2013
Jkt 229001
PO 00000
Frm 00007
Fmt 4705
Sfmt 4790
E:\FR\FM\19FEE0.SGM
19FEE0